Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/323830343a326336633a3a2f33322d313238203d3e20323635323137.roa
File:                     323830343a326336633a3a2f33322d313238203d3e20323635323137.roa (raw, json)
Hash identifier:          17/87P99GDZs7JU7Qx1aQSpKrM1BqoETAMrcbqITqFU=
Subject key identifier:   C8:0F:71:D4:BC:8A:21:43:D5:6A:CB:3F:9D:58:7A:32:36:00:25:B2
Certificate issuer:       /CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
Certificate serial:       3DC800DB21A144F0EC06F4E004563B95FABEABC0
Authority key identifier: 2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/323830343a326336633a3a2f33322d313238203d3e20323635323137.roa
Signing time:             Wed 14 Oct 2026 23:31:27 +0000
ROA not before:           Wed 14 Oct 2026 23:26:27 +0000
ROA not after:            Wed 13 Oct 2027 23:31:27 +0000
asID:                     265217
IP address blocks:        2804:2c6c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl
                          rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Oct 2026 21:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c8:00:db:21:a1:44:f0:ec:06:f4:e0:04:56:3b:95:fa:be:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
        Validity
            Not Before: Oct 14 23:26:27 2026 GMT
            Not After : Oct 13 23:31:27 2027 GMT
        Subject: CN=C80F71D4BC8A2143D56ACB3F9D587A32360025B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:04:98:0e:b9:e9:17:a3:f9:3f:df:25:06:
                    19:47:c8:74:56:d8:27:2a:7a:27:4f:00:7e:92:e0:
                    38:40:1b:0f:03:6d:9a:38:e3:85:77:d9:50:44:54:
                    3f:86:b7:10:b3:5c:e8:c2:f7:e1:54:c0:ad:09:56:
                    45:06:58:4b:39:ee:38:58:39:3a:65:1a:4b:73:f3:
                    51:75:a7:99:52:49:85:14:7e:df:a7:b8:16:6a:bf:
                    4a:e0:c9:6a:72:fa:ba:9a:80:88:41:39:a3:ce:a4:
                    d0:bd:0a:fc:fc:5c:72:94:ef:35:88:9f:03:a4:99:
                    d7:c1:4f:20:31:bc:a8:63:f8:d3:83:18:8d:e6:5b:
                    0b:d7:f4:bb:81:81:4d:5d:9a:69:87:01:77:13:0c:
                    f8:dc:51:73:25:c2:78:5d:c0:ad:b7:1d:72:42:d7:
                    cd:e9:4d:da:ad:60:89:29:a2:b2:e9:7a:47:ee:41:
                    4b:b1:e0:cb:da:c5:15:7b:a3:fa:e7:5a:03:20:e9:
                    99:e8:87:7f:c7:c6:e4:f2:0a:71:b3:72:14:e4:c4:
                    de:0a:eb:f9:2d:02:42:64:8a:d2:93:3b:ea:8b:f4:
                    39:75:c5:43:bd:3e:e9:74:12:df:f0:4e:0d:6b:d4:
                    4a:a1:d6:2f:f3:d9:27:9a:6e:0f:b3:19:9a:5d:f7:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0F:71:D4:BC:8A:21:43:D5:6A:CB:3F:9D:58:7A:32:36:00:25:B2
            X509v3 Authority Key Identifier:
                keyid:2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/323830343a326336633a3a2f33322d313238203d3e20323635323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:de:41:c8:f4:ba:e9:03:d3:8b:65:08:41:e8:46:9e:fd:
         27:0d:8e:45:97:7a:dd:d5:f4:6b:39:60:30:ab:bc:d7:6a:59:
         94:2f:2e:86:48:d7:e6:53:9f:ce:30:cf:a4:00:a1:52:5e:9a:
         dd:37:d2:c6:fb:c0:a8:ba:50:8b:46:ee:b5:b3:31:f8:f8:1d:
         7a:46:36:5e:39:11:98:af:2f:a1:e9:e5:94:12:6d:1b:f4:1a:
         97:72:13:a1:d7:dc:98:95:cd:d6:08:2a:f3:a4:96:07:7b:21:
         44:1c:ba:06:9f:c3:42:e5:4c:ca:14:62:c5:b3:1e:95:6d:5e:
         fd:7f:15:e0:3d:0c:90:cf:a9:c3:7a:0d:03:0f:32:eb:3f:80:
         6d:6e:33:c3:6b:67:fb:59:08:5d:7f:fa:82:a9:3f:f3:58:d7:
         ac:f7:3f:85:55:ce:43:ce:8c:1f:bf:56:9e:8a:35:50:e2:a3:
         8a:e3:ce:5a:91:36:1f:6d:0b:2b:24:bb:94:b3:23:f3:8b:a0:
         1a:ff:99:41:bd:27:ec:83:54:69:74:b6:e8:eb:0b:95:a3:8a:
         f5:bf:2d:14:f1:55:62:60:8b:c9:7b:03:4c:c3:86:64:44:30:
         8a:67:cc:02:28:d0:ff:88:9a:b2:ae:35:10:0d:50:1d:38:6b:
         63:35:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:52:20 2026 by rpki-client